Terms of Service

CyberTwin produces architecture recommendations based on the inputs you provide and our curated catalog. The output is informational, not professional advice. We work hard to keep prices and configurations current, but you remain responsible for verifying products and prices with vendors, configuring controls in your environment, and performing the actual security work. Following a CyberTwin recommendation does not transfer liability for security outcomes from you to us.

• You are responsible for activity under your account and for keeping credentials safe.
• Every paid tier includes unlimited environments; abuse (e.g., one org operating multiple unrelated companies) is grounds for migration to a higher tier or Enterprise pricing.
• We reserve the right to suspend accounts engaged in clearly hostile activity (credential testing, harassing our support team, evading payment).

• Fees are listed at /pricing. Assess and Operate may be billed monthly or annually (annual carries an approximately 20% discount versus 12 months of monthly); Program is annual-only; Enterprise is contracted per order form.
• Enterprise tier is contracted on a custom basis with sales-assisted onboarding and a contracted SLA.
• Failed payments suspend access after 14 days. Reactivation restores data unless deletion has run (see Privacy).
• Cancellation: cancel anytime. Monthly plans end at the next billing cycle; annual plans end at term completion. No partial refunds and no proration. After cancellation, the account is read-only for 90 days so you can export data; data is retained for another 90 days for re-activation; deleted permanently after 180 days.

• Do not use the API to mirror, resell, or compete with the catalog itself.
• Do not attempt to extract our control libraries or playbook content for redistribution outside your organization.
• Do not introduce malicious payloads in document uploads. We sandbox all parsing but you remain responsible for what you upload.

The catalog, framework mappings, playbooks, and decision-engine logic are CyberTwin's. Your environment data is yours. Output documents you generate are yours to use internally and to share with auditors, regulators, insurers, and your board, including in PDF form.

Assess, Operate, and Program: best-effort, target 99.5% monthly uptime on the web app, as published at /sla. Service credits, a dedicated success manager, and a contractually-penalized SLA are Enterprise-only, per the order form.

We provide the service on an “as is” basis. We do not warrant that the service will be uninterrupted, that catalog prices are perfectly current at all times, or that following a recommendation will prevent any specific security incident. To the maximum extent permitted by law, we disclaim implied warranties.

Our aggregate liability is capped at the fees you paid in the 12 months preceding the claim, except for fraud, willful misconduct, breach of confidentiality, or amounts owed under our infringement indemnity. Indirect, incidental, and consequential damages are excluded.

Either party may terminate with notice at the end of a billing period. We may suspend or terminate immediately for material breach (e.g., violations of acceptable use). On termination your environment data follows the same timeline as cancellation — read-only and exportable for 90 days, then deleted after 180 days total — except where we are legally required to retain it longer.

Governed by the laws of the State of Delaware, USA, without regard to conflicts principles. Disputes go to state or federal court in Delaware unless required otherwise by your local law.

We update these terms when our practices change. Material changes are emailed to org Owners with at least 30 days notice.

legal@cybertwin.io